Message processing method and device

Abstract

The invention provides a message processing method and device. The method comprises the steps that an NQA (Network Quality Analyzer) process sends an ICMP (Internet Control Message Protocol) echo request message to an RAWIP protocol through a raw socket; the RAWIP protocol adds a preset identifier field to an ICMP head of the ICMP echo request message and sends the ICMP echo request message carrying the preset identifier field; when receiving an ICMP echo reply message, the RAWIP protocol judges whether the preset identifier field is carried in the ICMP head of the ICMP echo reply message or not; if the preset identifier field is carried in the ICMP head of the ICMP echo reply message, the RAWIP protocol caches the ICMP echo reply message to a socket receiving buffer queue; and if the preset identifier field is not carried in the ICMP head of the ICMP echo reply message, the RAWIP protocol discards the ICMP echo reply message. Through application of the embodiment of the invention, theinfluence of an ICMP echo reply attack message on the normal processing of the ICMP echo reply message replied by a destination device can be avoided, and the network connectivity state inspection accuracy can be improved.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a message forwarding method and device. Background technique [0002] Ping is a command under Windows, Unix and Linux systems. Its main function is to detect whether the network can be connected, so that it can be used to help users analyze and judge network failures. [0003] The main process of the Ping command to detect whether the network can be connected is as follows: [0004] The initiator device constructs an ICMP (Internet Control Message Protocol, Internet Control Message Protocol) echo (echo) request (request) message, and sends it to the destination device; [0005] When the destination device receives the ICMP echo request message, it replies with an ICMP echo reply (response); [0006] If the initiator device receives the ICMP echo reply message sent by the destination device within the preset time, it is determined that the network can be connected ...

AI Technical Summary

Problems solved by technology

[0008] However, it has been found in practice that when there are a large number of ICMP echo reply attack packets, the ICMP echo reply packets sent by the destination device may be discarded because the receiving buffer queue is full of ICMP echo reply attack packets, or because the ICMP echo reply Too many attack packets cause the initiator device to fail to process the ICMP echo reply packet sent by the destination device within the preset time, and then the network connectivity status detection error occurs, that is, the destination device replies with the ICMP echo reply In the case of a packet, the initiator device detects that the network cannot be connected

Images